Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
File: vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft (raw, json)
Hash identifier: GqeGxEPxewOAW/oM03UAcTX+W10t5qE3QJ0/uxLUN5g=
Subject key identifier: 70:47:A2:83:83:DF:F2:1D:6F:BC:90:0F:E8:9E:45:05:0E:70:E7:11
Authority key identifier: BC:75:05:2B:50:25:6B:A5:62:90:4E:6F:13:43:50:D3:E7:5D:ED:58
Certificate issuer: /CN=bc75052b50256ba562904e6f134350d3e75ded58
Certificate serial: 0194BCE0622BB8ED0BE3C35B7316570EE194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:09 +0000
Manifest this update: Fri 31 Jan 2025 15:00:09 +0000
Manifest next update: Sat 01 Feb 2025 15:00:09 +0000
Files and hashes: 1: vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl (hash: eX9o9noVtpOYVD7S0r4tVZ1EVe8NpYvJ+KuUEJ2Ro8Y=)
2: yPRaM8Xt_LjcnEp6FMoPxSjubrg.roa (hash: 5MRfMsBo6t3UJiAKxq7MCbDbIZDyOCcBOja7hPHJABg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:62:2b:b8:ed:0b:e3:c3:5b:73:16:57:0e:e1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc75052b50256ba562904e6f134350d3e75ded58
Validity
Not Before: Jan 31 15:00:09 2025 GMT
Not After : Feb 1 15:00:09 2025 GMT
Subject: CN=7047a28383dff21d6fbc900fe89e45050e70e711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cb:25:00:aa:a6:6b:eb:dc:54:ac:11:55:7b:
c5:ac:5b:31:05:bd:20:d1:d5:e7:18:ed:60:15:e2:
46:1f:5a:f7:73:ed:b3:f6:d0:26:19:5b:d3:b7:5f:
70:bc:c5:49:27:07:11:38:48:8c:b8:81:75:40:a3:
6d:b2:d0:ad:ed:6b:b0:f2:1c:7a:77:7f:5d:53:8f:
49:e1:73:7b:25:64:62:f4:53:3e:e9:61:51:69:8b:
0f:bd:0d:e7:49:3f:84:51:af:a6:e4:00:d3:f1:1e:
a4:08:a9:a7:ec:f2:6e:33:9a:9f:44:7b:ff:c5:c0:
d8:5b:5b:b5:9f:e1:ef:f7:59:68:33:9f:1b:eb:47:
a0:ec:2b:23:90:53:73:6c:20:9c:39:4d:ba:0b:bb:
f2:75:a1:fb:36:65:17:69:fb:ea:a7:76:97:15:64:
af:31:04:86:bb:32:de:ec:71:8e:22:a2:d4:3f:31:
ff:f9:da:33:4e:8d:4e:cb:31:28:b5:79:d9:02:f1:
09:ae:be:2b:ae:86:6a:37:f6:f3:f6:3d:d3:57:81:
2e:93:be:66:77:c7:dd:fe:31:51:88:cc:6b:24:bb:
9d:59:9f:4a:ad:2f:bd:1d:46:e6:8a:75:87:3a:4e:
62:82:21:f9:04:4b:4a:96:f5:d5:1c:9f:92:65:dd:
90:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:47:A2:83:83:DF:F2:1D:6F:BC:90:0F:E8:9E:45:05:0E:70:E7:11
X509v3 Authority Key Identifier:
keyid:BC:75:05:2B:50:25:6B:A5:62:90:4E:6F:13:43:50:D3:E7:5D:ED:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:9a:7c:0e:82:cf:8d:33:51:67:d8:9f:02:b5:14:4c:b5:3b:
45:ab:a4:48:db:ec:3b:ef:aa:2c:7d:0c:9d:4d:54:f6:40:43:
20:fa:cb:ed:5b:77:69:f3:95:23:33:30:6a:b0:9f:91:b7:71:
69:8e:cd:2e:55:b3:ad:a0:e7:aa:10:40:95:8f:af:d9:4e:4c:
95:18:36:90:b9:90:7a:9f:0d:ab:b0:7d:6c:04:f1:27:70:ef:
09:08:eb:b1:71:f8:c9:11:8f:b8:a5:1f:49:fc:40:5b:25:64:
d8:ab:2e:82:5b:54:38:ad:28:40:fa:bb:5c:83:cf:b6:e1:f6:
7c:cd:fd:de:e7:61:68:4b:ea:37:f1:ed:35:61:f4:ca:63:48:
64:e8:3c:c9:bb:26:eb:e2:90:c0:a4:8e:14:fb:b3:cc:3c:55:
6d:15:46:70:d9:8f:6c:c4:1b:2b:5e:70:89:ff:ce:70:f0:85:
1c:8f:9e:fc:a9:4e:85:e8:fb:4c:32:3a:dd:92:c1:57:41:22:
71:a2:ab:45:0b:20:94:fc:26:bd:a3:0a:86:79:36:de:b0:23:
e6:df:a5:32:7a:ee:2c:1f:11:79:a7:b9:44:c2:75:e0:4b:a4:
a3:37:9c:bb:41:56:0d:80:f1:d4:c2:4e:c5:75:a8:42:e4:27:
eb:29:61:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:26 2025 by rpki-client